Actually I tested this with a user from the same domain as the computer account and everything worked fine. I think that these are just not able to work across domains for some reason.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, February 16, 2005 2:57 PM To: [email protected] Subject: Re: [ActiveDir] Strange Issue Sandra, The best way to check this out is to activate detailed logging by setting the following registry key on the client:- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon UserEnvDebugLevel = 65538 (Dword) After loginng on again, check out the log in %windir%\Debug\UserMode\userenv.log. It is a bit messy so we offer a free tool that assists you to view it. You may find that the ADM extension is not applying for some reason. http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml If you still have problems, mail me the log offline and I will look at it for you. Also check the Event log for any issues Alan Cuthbertson Policy Management Software:- http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml ADM Template Editor:- http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml Policy Log Reporter(Free) http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml ----- Original Message ----- From: "Salandra, Justin A." <[EMAIL PROTECTED]> To: <[email protected]> Sent: Thursday, February 17, 2005 4:53 AM Subject: RE: [ActiveDir] Strange Issue Settings are User settings in the parent domain where the user resides. The user is getting other policy settings with no problem. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adams, Kenneth W (Ken) Sent: Wednesday, February 16, 2005 10:47 AM To: [email protected] Subject: RE: [ActiveDir] Strange Issue Check your policy to determine if these settings are in the Computer or User portion of the GPO. If they are set in the Computer portion, then the computer in the child domain won't get the policy settings from the parent domain. You would need to set the same policy items in the child domain's GPO. Ken Adams -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Wednesday, February 16, 2005 10:25 AM To: [EMAIL PROTECTED]; [email protected] Subject: [ActiveDir] Strange Issue I am not getting any errors but I have a computer in a child domain and a user in the root domain. When the user logs in they get all the policy settings applied except the ones that say that the My Computer Icon and the My Network Places Icon and the My Documents Icon are not removed from the desktop. I have each of these set to disable just like all my other policies and yet when this user logs in to the child domain PC those very specific settings do not get applied, but other parts of the policy do, like folder redirection and internet explorer settings. Any Ideas? Justin A. Salandra MCSE Windows 2000 & 2003 Network and Technology Services Manager Catholic Healthcare System 212.752.7300 - office 917.455.0110 - cell [EMAIL PROTECTED] List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
